Microsoft Reports On Global Hotel Wi-Fi Network Cyber Attack

Microsoft has reported on a cyber attack targeting the Wi-Fi network infrastructures of hotels and conference centers around the world. The corporation has attributed the attacks to a group called Storm-2945, which it considers a subdivision of the Russia-linked group Midnight Blizzard.

As part of the campaign, attackers have discreetly redirected users through their controlled phishing infrastructure and spread malware. They disguised these programs as browser or operating system updates. Messages prompting users to update were displayed in response to automatic checks of internet connectivity performed by browsers immediately after connecting to a new network.

Midnight Blizzard is a hacker group operating out of Russia, which the authorities of the United States and the United Kingdom link to the Russian Foreign Intelligence Service. According to Microsoft, the group is targeting government agencies, diplomatic missions, and IT service providers in the U.S. and Europe.